CVE-2025-62817CWE-476

CVE-2025-62817

High · published March 3, 2026

CVSS v3.1

7.5

EPSS

Percentile

21.9

In the wild

Unconfirmed

What it is

An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, and 2500. A NULL pointer dereference of session->ncp_hdr_buf in __pilot_parsing_ncp() causes a denial of service.

The record

Technical detail

CVSS v3.1: 7.5 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0: Not supplied
EPSS: 0.00303 · 21.9th percentile
Weakness: CWE-476 · NULL Pointer Dereference
Published: 2026-03-03T22:16Z

Affected products (7)

Product	Versions	Fixed in
samsung/exynos_1280_firmware	all versions	—
samsung/exynos_1380_firmware	all versions	—
samsung/exynos_1480_firmware	all versions	—
samsung/exynos_1580_firmware	all versions	—
samsung/exynos_2200_firmware	all versions	—
samsung/exynos_2400_firmware	all versions	—
samsung/exynos_2500_firmware	all versions	—

References (2)

https://semiconductor.samsung.com/support/quality-support/product-security-updates/ · [email protected]https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-62817/ · [email protected]

EPSS history

Timeline

03 MAR 00:00Z
An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, and 2500
cvelistv5